Skip to content

Instantly share code, notes, and snippets.

View pullp's full-sized avatar
🏠
Working from home

wxk pullp

🏠
Working from home
View GitHub Profile
@WangYihang
WangYihang / timesnapper-license-server.py
Last active August 24, 2021 08:06
TimeSnapper License Server
#!/usr/bin/env python
# encoding:utf-8
import time
import string
import random
from flask import Flask
from flask import Response
app = Flask(__name__)

NULL ( 17-18 solves)

Challenge makes a thread to do the job. So , a thread_arena is created on a new mmap_segment.

Bug

Overflow in read function :

 for ( i = 0LL; ; i += v3 )
 {
@herrcore
herrcore / ida_memdump.py
Created November 13, 2017 03:38
Dump a blob of memory into a file - IDA Pro script
import idautils
import idaapi
def memdump(ea, size, file):
data = idc.GetManyBytes(ea, size)
with open(file, "wb") as fp:
fp.write(data)
print "Memdump Success!"
@thejh
thejh / seccomp_ptrace_escape.c
Last active September 2, 2024 05:46
PoC for bypassing seccomp if ptrace is allowed (known, documented issue, even mentioned in the manpage)
#include <stdio.h>
#include <stdlib.h>
#include <assert.h>
#include <signal.h>
#include <errno.h>
#include <fcntl.h>
#include <stddef.h>
#include <sys/syscall.h>
#include <sys/types.h>
#include <sys/stat.h>